Managing user permissions correctly is crucial for security and efficiency. In this guide, you will learn how to assign permissions to users in Windows Server using simple steps.
- Open Computer Management
- Press Win + R, type compmgmt.msc, and press Enter.
- Expand "Local Users and Groups" in the left panel.
- Click on "Users" to see the list of users.
- Add the User to a Group (Recommended)
Grouping users ensures better permission management.
- Click on "Groups" in the left panel.
- Double-click a group (e.g., Administrators, Remote Desktop Users, etc.).
- Click "Add" → Type the username → Click OK.
✅ Example: To allow a user to access the server remotely, add them to the "Remote Desktop Users" group.
- Assign Folder or File Permissions
- Right-click on the folder or file you want to manage.
- Select "Properties" → Go to the "Security" tab.
- Click "Edit" → Click "Add" → Enter the username.
- Select permissions (Read, Write, Modify, Full Control, etc.).
- Click OK and Apply.
✅ Example: To allow a user to only read a shared folder, select "Read" permission.
- Assign Permissions via Group Policy (Advanced)
For domain environments, use Group Policy (GPO) to manage permissions:
- Open Group Policy Management (gpmc.msc).
- Create a new GPO or modify an existing one.
- Navigate to Computer Configuration → Windows Settings → Security Settings → File System.
- Add the folder path and set permissions.
- Apply the policy to a specific OU (Organizational Unit).
- Verify the Permissions
To check if permissions are correctly assigned:
- Log in with the user account and try accessing the file or service.
- Use the "Effective Access" tab in the Security settings to verify what permissions a user has.
Conclusion
By following these steps, you can easily manage user permissions in Windows Server. Using groups and GPOs will make administration easier and improve security.